Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json)
Hash identifier: Mew/ydflZvcoa0GhUWVfUWFuQ3UzYxnEMTm1ogaPgAY=
Subject key identifier: AB:58:25:AA:17:EF:74:33:F3:6B:D6:64:60:97:AE:AE:01:FB:6D:CA
Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9
Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9
Certificate serial: 35443B09A7382874BC0C4EC92F64336A26FF8DB9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
Manifest number: 01EF
Signing time: Mon 27 Apr 2026 09:42:00 +0000
Manifest this update: Mon 27 Apr 2026 09:37:00 +0000
Manifest next update: Thu 30 Apr 2026 12:24:00 +0000
Files and hashes: 1: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: MmM/AmJ5iBEGomeELARot8UaIBt4udal5VcH4vgwZsk=)
2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: hOjIzzaF41h+bbc91vBslhua7MJ7/Ep9kVdxucTN/i0=)
3: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: KiF64A3fF/SJRspvyCH+vLXGtHXvxDZxzMG/c/Ts5HA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:44:3b:09:a7:38:28:74:bc:0c:4e:c9:2f:64:33:6a:26:ff:8d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9
Validity
Not Before: Apr 27 09:37:00 2026 GMT
Not After : Apr 30 12:24:00 2026 GMT
Subject: CN=AB5825AA17EF7433F36BD6646097AEAE01FB6DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:5c:a8:9d:ae:9b:c3:c1:0b:cd:2d:22:a2:
ad:13:f6:c7:10:58:ca:77:55:f7:7e:37:fc:34:41:
23:c8:4a:23:ee:e7:5b:ff:97:38:fd:95:fe:27:d8:
7c:bd:0a:49:62:eb:1a:3b:4a:1c:92:14:02:2f:68:
57:29:f8:0c:8b:86:93:aa:5b:cc:84:83:91:dc:2b:
ba:05:5f:d0:00:30:1f:8d:54:de:56:a9:9d:91:b0:
42:87:d0:12:07:24:51:da:c9:cc:52:9f:85:15:a9:
5d:d0:9a:2b:ab:d4:78:fd:51:c4:4f:70:a2:53:5a:
b0:d9:c6:8d:e3:c9:5c:74:60:9a:6e:5e:8e:6f:e5:
0b:29:1e:aa:fb:d7:3f:2c:29:36:ad:41:01:29:4d:
06:dc:54:66:a5:cb:7e:84:46:7a:f5:16:bc:08:74:
19:14:ef:87:6e:e3:22:cc:09:4a:ac:75:21:d5:a9:
ee:8e:e5:c2:95:71:94:cb:c6:bb:64:57:55:38:8a:
95:0c:b8:18:24:52:88:08:14:17:83:e8:10:c0:b6:
ce:89:72:70:bb:23:f0:5b:82:8f:be:9a:7d:c0:89:
f6:bc:bc:e8:84:8b:a6:11:10:1d:ca:02:e1:a9:cc:
e6:c1:ea:9c:04:6a:89:48:c7:9b:0b:8a:dc:5d:a8:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:25:AA:17:EF:74:33:F3:6B:D6:64:60:97:AE:AE:01:FB:6D:CA
X509v3 Authority Key Identifier:
keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:ae:d8:78:af:04:ea:3e:40:18:1c:a7:11:18:fd:99:60:
a6:02:fe:3e:b9:41:ea:6a:1d:1d:f6:1c:49:01:8c:52:bd:dd:
fa:3f:c1:eb:01:08:19:9a:b2:a4:3b:71:fb:b1:b8:3c:65:29:
11:1e:44:77:4f:ee:6b:c3:53:1d:21:8e:df:9b:62:82:a0:01:
8c:d1:60:70:60:cb:ea:f2:a8:43:2a:75:cc:d9:a9:00:0a:c1:
bf:0d:2d:a6:f1:60:e2:90:4c:fb:0e:9a:09:48:0b:ca:2e:2f:
97:81:cb:dc:d6:93:5c:fc:e3:91:f5:44:db:11:2b:93:22:b7:
c7:ff:7a:1e:7a:f6:1c:2b:b4:60:76:66:ed:12:2a:5e:23:53:
1b:61:cf:c2:71:a3:75:8b:eb:c9:ff:9a:9f:91:fd:b6:4f:94:
91:f5:eb:b1:dc:af:97:91:ce:8f:a9:0f:bf:1b:e8:ec:3b:c4:
de:f8:16:0a:2f:04:88:dc:e8:86:fb:96:af:eb:a3:34:4b:37:
c8:83:af:2a:a3:ad:49:6c:ca:7b:02:07:db:83:29:15:f5:d4:
33:f9:68:1c:4a:98:82:82:4d:ea:a6:62:f0:a8:5e:cc:34:66:
46:c3:4a:66:b0:c2:41:5c:0c:14:6c:76:24:f7:88:e0:7c:37:
fd:0f:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:01:59 2026 by rpki-client